$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer File: b02b2a27-63d2-435f-8114-d98e289edc6c.cer (raw, json) Hash identifier: Tb8KeUy7kayV9dQuQGs/doW09ssw0xlYvA2Rk6TGp8Y= Subject key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority key identifier: 3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA Certificate issuer: /CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Certificate serial: 010D0C9F4328584AC5A3FB83DF138CCBF9F89A00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ Notify URL: https://rrdp.arin.net/notification.xml Certificate not before: Thu 07 Aug 2025 00:45:24 +0000 Certificate not after: Wed 10 Nov 2027 01:45:24 +0000 Subordinate resources: AS: 36230 IP: 204.110.218.0/23 IP: 208.71.208.0/22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c5:a3:fb:83:df:13:8c:cb:f9:f8:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f60c9f32-a87c-4339-a2f3-6299a3b02e29 Validity Not Before: Aug 7 00:45:24 2025 GMT Not After : Nov 10 01:45:24 2027 GMT Subject: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:da:70:c7:03:ef:48:1c:95:22:22:b5:8a:90: 98:76:bd:2f:61:cc:0e:d8:df:78:4d:f1:bb:f9:aa: fc:3f:15:5f:44:f0:e1:10:8e:ce:5e:ab:b5:98:44: 06:98:ed:1f:32:ba:9e:43:9d:54:0c:63:8a:d6:7f: da:0d:4f:bd:65:03:0a:c6:50:95:76:8d:49:2a:de: 0e:d4:86:fb:df:ae:08:30:85:cb:3c:f8:be:d7:fd: 07:00:d6:f9:d7:40:7f:53:b3:89:8d:a8:2f:67:e5: 10:c7:42:d8:7b:13:06:5e:81:e3:ba:5b:3c:bb:e5: d1:fd:2e:3b:24:7c:5f:30:1a:a4:91:45:de:96:a6: 02:64:4d:d8:e5:03:43:47:02:de:7f:46:55:2a:40: d9:90:3b:ef:25:a6:72:c0:b3:78:f1:b7:1f:fd:77: b4:94:71:f2:d0:71:13:4d:36:fb:9c:be:97:1a:ed: 06:53:20:f1:ac:52:fc:d6:28:68:d5:6f:ae:18:df: b6:b2:0d:ee:ec:a6:97:e6:6c:a5:f2:ee:81:ac:00: 67:13:2c:86:3e:2a:0c:ad:81:b4:b5:e8:2b:c5:a1: 31:b8:0d:a8:58:c3:55:ea:04:e5:b3:f2:a4:74:ff: ac:d8:7a:ed:0f:4d:19:1d:fe:0a:15:31:cb:2c:1a: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Subject Information Access: CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/ RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft RPKI Notify - URI:https://rrdp.arin.net/notification.xml X509v3 Basic Constraints: critical CA:TRUE X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl X509v3 Authority Key Identifier: keyid:3C:0D:7D:5C:BA:D6:A2:5E:FC:9D:0E:D5:57:F0:CA:24:63:54:8E:CA X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer sbgp-ipAddrBlock: critical IPv4: 204.110.218.0/23 208.71.208.0/22 sbgp-autonomousSysNum: critical Autonomous System Numbers: 36230 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:2d:32:d2:7c:60:8d:a0:7d:e8:06:db:46:8b:e1:97:5d:83: 41:35:cc:07:42:8f:a2:ff:a6:10:16:75:45:a2:da:ba:58:06: 0c:5e:56:ea:d6:ef:6a:8f:e2:0a:e3:99:2a:ce:f1:c2:fb:81: c8:5c:e3:20:db:83:ca:c3:98:aa:49:ac:3a:00:76:49:33:14: 0c:19:1f:b4:f3:f8:02:ad:14:8a:cf:f2:ff:62:11:b1:6e:c3: 0d:71:89:b4:fa:e4:1a:7a:ec:02:35:9e:2d:ad:0a:84:fa:01: 6c:0d:8b:38:79:70:90:20:80:a5:06:b4:1e:d3:60:d8:39:fc: 23:64:42:8f:8c:c3:28:e4:da:c3:7d:dc:35:80:eb:4c:6c:24: c8:0e:24:e7:9d:4a:d8:18:d1:c0:e1:4d:9f:8b:d8:af:3d:39: 3e:ff:19:e0:7c:9b:8b:5f:22:26:02:03:39:97:ec:cd:96:b3: 80:07:3a:87:57:20:dd:9e:68:82:b0:32:80:05:59:51:2d:13: c0:11:61:c3:c8:2a:f1:08:71:c2:3f:3d:bd:92:38:43:d3:e5: 11:ee:61:8e:c0:fc:96:cb:be:2d:48:2f:6b:86:ec:7b:45:a8: ed:9b:48:9d:50:6b:ac:e4:02:f5:55:ad:15:12:08:ab:ef:dc: 6c:1e:ee:ef -----BEGIN CERTIFICATE----- MIIHDzCCBfegAwIBAgIUAQ0Mn0MoWErFo/uD3xOMy/n4mgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAy ZTI5MB4XDTI1MDgwNzAwNDUyNFoXDTI3MTExMDAxNDUyNFowLzEtMCsGA1UEAxMk YjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVkYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09pwxwPvSByVIiK1ipCYdr0vYcwO2N94TfG7 +ar8PxVfRPDhEI7OXqu1mEQGmO0fMrqeQ51UDGOK1n/aDU+9ZQMKxlCVdo1JKt4O 1Ib7364IMIXLPPi+1/0HANb510B/U7OJjagvZ+UQx0LYexMGXoHjuls8u+XR/S47 JHxfMBqkkUXelqYCZE3Y5QNDRwLef0ZVKkDZkDvvJaZywLN48bcf/Xe0lHHy0HET TTb7nL6XGu0GUyDxrFL81iho1W+uGN+2sg3u7KaX5myl8u6BrABnEyyGPioMrYG0 tegrxaExuA2oWMNV6gTls/KkdP+s2HrtD00ZHf4KFTHLLBr8MQIDAQABo4IEITCC BB0wHQYDVR0OBBYEFGj9EKl2+gmsRArP65VMsjK/NZHJMIIByAYIKwYBBQUHAQsE ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3 MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9i MDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvMIHSBggrBgEFBQcw CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10 YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzIt YTg3Yy00MzM5LWEyZjMtNjI5OWEzYjAyZTI5L2IwMmIyYTI3LTYzZDItNDM1Zi04 MTE0LWQ5OGUyODllZGM2Yy9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5 ZWRjNmMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90 aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5 ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNjBjOWYzMi1hODdjLTQz MzktYTJmMy02Mjk5YTNiMDJlMjkuY3JsMB8GA1UdIwQYMBaAFDwNfVy61qJe/J0O 1VfwyiRjVI7KMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2 MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS5jZXIwJQYIKwYBBQUH AQcBAf8EFjAUMBIEAgABMAwDBAHMbtoDBALQR9AwGgYIKwYBBQUHAQgBAf8ECzAJ oAcwBQIDAI2GMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABYtMtJ8YI2gfegG20aL4Zddg0E1zAdCj6L/phAW dUWi2rpYBgxeVurW72qP4grjmSrO8cL7gchc4yDbg8rDmKpJrDoAdkkzFAwZH7Tz +AKtFIrP8v9iEbFuww1xibT65Bp67AI1ni2tCoT6AWwNizh5cJAggKUGtB7TYNg5 /CNkQo+Mwyjk2sN93DWA60xsJMgOJOedStgY0cDhTZ+L2K89OT7/GeB8m4tfIiYC AzmX7M2Ws4AHOodXIN2eaIKwMoAFWVEtE8ARYcPIKvEIccI/Pb2SOEPT5RHuYY7A /JbLvi1IL2uG7HtFqO2bSJ1Qa6zkAvVVrRUSCKvv3Gwe7u8= -----END CERTIFICATE-----Generated at Sat Aug 23 09:41:23 2025 by rpki-client